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In the Claims 

1 . (Currently Amended) A method for maintaining computer security 
comprising: 

providing a signature file containing information about known system 
vulnerabilities ; 

receiving an incoming message from at least one client computer; 
comparing the received incoming message with the signature file to determine 
whether the incoming message is malicious; and 

blocking the incoming messages determined to be malicious from reaching a web 

server. 

2. (Original) The method of claim 1, wherein the comparing further comprises: 
parsing the incoming message; 

converting the incoming message into an internal format; 
comparing the converted incoming message with the signature file; and 
determining whether the converted incoming message is malicious based on the 
comparison. 

3. (Original) The method of claim 2, further comprising reassembling the 
converted incoming message back into its original format prior to forwarding it to the web 
server if it is determined that the code is not malicious. 

4. (Original) The method of claim 3, further comprising forwarding the 
reassembled message to the web server. 

5. (Currently Amended) The method of claim 1, wherein the signature file 
contains information about known system vulnerabilities of a client web server . 

6. (Original) The method as claimed in claim 1, wherein the signature file is 
made available through a web server. 
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7. (Original) The method as claimed in claim 1, further comprising continuously 
updating the signature file. 

8. (Original) The method as claimed in claim 1, further comprising periodically 
downloading the signature file in order to make its copy current. 
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9. (Currently Amended) A system for maintaining computer security 
comprising: 

a signature file containing information about known system vulnerabilities ; 

a web server; and 

a proxy machine receiving an incoming message from at least one client computer, 
comparing the received incoming message with the signature file to determine whether the 
incoming message is malicious and blocking incoming messages determined to be malicious 
from reaching the web server. 

1 0. (Currently Amended) The system of claim 9, wherein the proxy machine 
further comprises: 

an HTTP a Hypertext Transfer Protocol ("HTTP") message parser module for 
receiving, parsing and converting the incoming messages into a defined format: 

an HTTP message analyzer module for comparing the converted incoming messages 
with the signature file; and 

an HTTP message reassembly module for reassembling the converted incoming 
messages determined not to be malicious into their original format and forwarding them to 
the web server. 

1 1 . (Currently Amended) The system of claim 9, wherein the signature file 
contains information about known system vulnerabilities of the web server . 

12. (Original) The system of claim 9, wherein the signature file is made available 
through a web server. 

13. (Original) The system of claim 9, wherein the signature file is continuously 
updated. 

14. (Original) The system of claim 9, wherein the proxy machine periodically 
downloads the signature file in order to make its copy current. 
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15. (Original) The system of claim 10, wherein the signature file is linked to the 
HTTP message analyzer module. 
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16. (Currently Amended) A tangible computer storage medium including 
computer executable code for maintaining computer security, comprising: 

code for accessing a signature file containing information about known system 
vulnerabilities ; 

code for receiving an incoming message from at least one client computer; 

code for comparing the received incoming message with the signature file to 
determine whether the incoming message is malicious; and 

code for blocking the incoming messages determined to be malicious from reaching a 
web server. 

17. (Original) The computer recording medium of claim 16, further comprising: 
code for parsing the incoming message; 

code for converting the incoming message into an internal format; 
code for comparing the converted incoming message with the signature file; and 
code for determining whether the converted incoming message is malicious based on 
the comparison. 

1 8. (Original) The computer recording medium of claim 1 7, further comprising 
code for reassembling the converted incoming message back into its original format if it is 
determined that the code is not malicious. 

1 9. (Original) The computer recording medium of claim 1 8, further comprising 
code for forwarding the reassembled message to the web server. 

20. (Currently Amended) The computer recording medium of claim 1 6, wherein 
the signature file contains information about known system vulnerabilities of a client web 
server . 

21 . (Original) The computer recording medium of claim 16, wherein the 
signature file is made available through a web server. 
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22. (Original) The computer recording medium of claim 16, further comprising 
code for continuously updating the signature file. 

23. (Original) The computer recording medium of claim 16, further comprising 
code for periodically downloading the signature file in order to make its copy current. 

24. (Currently Amended) The method of claim 1, wherein the incoming message 
comprises an HTTP messages a Hypertext Transfer Protocol ("HTTP") message . 

25. (Currently Amended) The system of claim 9, wherein the incoming message 
comprises an HTTP messages a Hypertext Transfer Protocol ("HTTP") message . 

26. (Currently Amended) The computer storage medium of claim 16, wherein 
the incoming message comprises an HTTP messages a Hypertext Transfer Protocol 
("HTTP") message . 
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